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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the 
application. 

Please cancel claims 4, 12, and 19 without prejudice. 
Listing of claims: 

1 . (currently amended) A computer-implemented method for managing access to 
computer-provided services for a plurality of requesters, comprising: 

defining a plurality of combinations of access characteristics and associating 
each of the combinations with a security level, wherein the access characteristics 
include a type of device with which the session is maintained, ownership rights to the 
device with which the session is maintained, characteristics of a network over which 
the session is maintained, and characteristics of an authentication method , wherein 
the ownership rights indicate one of shared use or exclusive use of the device and at 
least one of the combinations of access characteristics specifies shared use 
ownership rights and at least one other access characteristic ; 

associating each of the services with one of the security levels; 

processing a login request from a requester, whereby a session is initiated; 

determining access characteristics of the session; 

receiving a request for one of the services from the requester; 

authenticating the requester with an authentication method; and 

granting access to the one of the services if the access characteristics of the 
session level are associated with a security level that satisfies the security level 
associated with the one of the services. 

2. (original) The method of claim 1 , further comprising, if the access characteristics 
of the session are associated with a security level that does not satisfy the security 
level requirement associated with the one of the services, then prompting the 
requester for authentication data. 

3. (canceled) 
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4. (canceled) 

5. (canceled) 

6. (canceled) 

7. (original) The method of claim 1 , further comprising associating each of the 
services with one of the security levels in response to user selections of the security 
levels. 

8. (original) The method of claim 1 , further comprising: 

providing a plurality of user-selectable security categories, each security 
category including a set of security levels associated with the services; 

establishing one of the security categories as an operating security category 
in response to user selection of the one of the security categories; and 

granting access to the one of the services if the access characteristics of the 
session are associated with a security level that satisfies the security level 
requirement associated with the one of the services in the operating security 
category. 

9. (currently amended) In a system including a plurality of communications 
devices coupled to one or more computer-provided services via a gateway 
arrangement a method for managing access to the services for a plurality of users 
at the communications devices, comprising: 

defining a plurality of combinations of access characteristics and associating 
each of the combinations with a security level at the gateway arrangement, wherein 
the access characteristics include a type of device with which the session is 
maintained, ownership rights to the device with which the session is maintained, 
characteristics of a network over which the session is maintained, and 
characteristics of an authentication method , wherein the ownership rights indicate 
one of shared use or exclusive use of the device and at least one of the 
combinations of access characteristics specifies shared use ownership rights and at 
least one other access characteristic : 

associating each of the services with one of the security levels at the gateway 
arrangement; 
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processing a login request from a user at the gateway arrangement, whereby 
a session is initiated between a communications device and a service; 

authenticating the user with an authentication method; 

determining access characteristics of the session at the gateway 
arrangement; 

receiving at the gateway arrangement a request for one of the services from 
the user of the communications device; and 

granting access to the one of the services if the access characteristics of the 
session are associated with a security level that satisfies the security level 
associated with the one of the services. 

10. (original) The method of claim 9, further comprising, if the access characteristics 
of the session are associated with a security level that does not satisfy the security 
level requirement associated with the one of the services, then prompting the user at 
the communication device for authentication data. 

1 1 . (canceled) 

12. (canceled) 

13. (canceled) 

14. (canceled) 

15. (original) The method of claim 9, further comprising associating each of the 
services with one of the security levels in response to user selections of the security 
levels. 

16. (original) The method of claim 9, further comprising: 

providing a plurality of administrator-selectable security categories at the 
gateway arrangement, each security category including a set of security levels 
associated with the services; 

establishing one of the security categories as an operating security category 
at the gateway arrangement in response to administrator selection of the one of the 
security categories; and 
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granting access to the one of the services if the access characteristics of the 
session are associated with a security level that satisfies the security level 
requirement associated with the one of the services in the operating security 
category. 

17. (currently amended) An apparatus for managing access to computer-provided 
services for a plurality of users operating respective communications devices, 
comprising: 

means for defining a plurality of combinations of access characteristics and 
associating each of the combinations with a security level, wherein the access 
characteristics include a type of device with which the session is maintained, 
ownership rights to the device with which the session is maintained, characteristics 
of a network over which the session is maintained, and characteristics of an 
authentication method , wherein the ownership rights indicate one of shared use or 
exclusive use of the device and at least one of the combinations of access 
characteristics specifies shared use ownership rights and at least one other access 
characteristic ; 

means for associating each of the services with one of the security levels; 
means for processing a login request from a user, whereby a session is 
initiated; 

means for determining access characteristics of the session; 

means for receiving a request for one of the services from the user; 

means for authenticating the requester with an authentication method; and 

means for granting access to the one of the services if the access 
characteristics of the session are associated with a security level that satisfies the 
security level associated with the one of the services, 

18. (currently amended) A gateway arrangement for managing access to 
computer-provided services for a plurality of users at respective communications 
devices, comprising: a computing system configured with a plurality of combinations 
of access characteristics and associated security levels and services associated with 
the security levels, wherein the access characteristics include a type of device with 
which the session is maintained, ownership rights to the device with which the 
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session is maintained, characteristics of a network over which the session is 
maintained, and characteristics of an authentication method , wherein the ownership 
rights indicate one of shared use or exclusive use of the device and at least one of 
the combinations of access characteristics specifies shared use ownership rights 
and at least one other access characteristic , the gateway arrangement further 
configured to process login requests from the users, authenticate the requester with 
an authentication method, establish sessions between the communications devices 
and the services, determine access characteristics of the sessions, and selectively 
grant access to a service requested by a user if the access characteristics of the 
user's session are associated with a security level that satisfies the security level 
associated with the service. 

19. (canceled) 

20. (canceled) 
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